Add Actix audit file to registry

[robjtede]

I've started an audit log for all Actix first-party and some third-party ecosystem crates.

[mystor]

Thanks!

I notice your audits.toml file has inline comments, suggesting it is manually managed, rather than created using cargo-vet. Are you aware of the stability requirements of an importable audits.toml file (e.g. never removing an audit from the file) which would normally be managed by cargo vet if it was used to generate the file?

I notice that some audits were removed from the file in previous changes (such as this one). Changes like this could cause vet to start failing for folks who are depending on your published audits.

[robjtede]

manually managed

Totally get the concern and happy to recreate this file purely with the cargo vet commands before telling more people about it.

some audits were removed from the file in previous changes

yes, i'd learned about wildcard-audits and that seemed like an obvious improvement for the self-certify cases

stability requirements of an importable audits.toml file (e.g. never removing an audit from the file)

yes, very reasonable requirement and will certainly uphold it going forwards

---

end of the day, you guys are the pros with this so i'd be a fool not to take your advice on how to make this a good experience for everyone

[mystor]

Thanks! Just wanted to check in about those things given the manually curated audits.toml file before adding actix to the registry :-)